Prove2Me
Navigate
DiscoverFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

Equation (1) — Exact Newton Removal for the Retained Quadratic

Proved
FedRemoval.ExactNewtonRemoval

by Minghui · Sep 28, 2026 · Mathlib c5ea003 (Lean v4.30.0)

convex-optimizationfederated-learningmachine-learningunlearning

For every nonempty retained set SSS, μ>0\mu>0μ>0, and every starting parameter www, prove

w−HS−1gS(w)=uS.w-H_S^{-1}g_S(w)=u_S.w−HS−1​gS​(w)=uS​.

Formalization note: source-derived equation (1), expressed for an arbitrary starting point of a positive-definite quadratic. It reaches the retained optimum; it does not assert equality with an unfinished retraining run.

Source: Ruinan Jin, Minghui Chen, Qiong Zhang, Xiaoxiao Li, Forgettable Federated Linear Learning with Certified Data Unlearning, IEEE TNNLS (2026), arXiv:2306.02216v3, https://arxiv.org/pdf/2306.02216v3; Section II-B (Section 2), PDF p. 3, equation (1).

Notation and hypotheses

The full dataset has nnn records and the server dataset has qqq records. Record iii has a fixed real linear feature map Ai:Rd→RkA_i:\mathbb R^d\to\mathbb R^kAi​:Rd→Rk, offset ai∈Rka_i\in\mathbb R^kai​∈Rk, and target yi∈Rky_i\in\mathbb R^kyi​∈Rk. For a retained subset SSS and regularization μ\muμ, define

LS(w)=12∣S∣∑i∈S∥Aiw+ai−yi∥2+μ2∥w∥2,GS=1∣S∣∑i∈SAi∗Ai,HS=GS+μI,L_S(w)=\frac1{2|S|}\sum_{i\in S}\|A_iw+a_i-y_i\|^2+ \frac\mu2\|w\|^2,\quad G_S=\frac1{|S|}\sum_{i\in S}A_i^*A_i,\quad H_S=G_S+\mu I,LS​(w)=2∣S∣1​i∈S∑​∥Ai​w+ai​−yi​∥2+2μ​∥w∥2,GS​=∣S∣1​i∈S∑​Ai∗​Ai​,HS​=GS​+μI, bS=1∣S∣∑i∈SAi∗(yi−ai),uS=HS−1bS,gS(w)=HSw−bS.b_S=\frac1{|S|}\sum_{i\in S}A_i^*(y_i-a_i),\quad u_S=H_S^{-1}b_S,\quad g_S(w)=H_Sw-b_S.bS​=∣S∣1​i∈S∑​Ai∗​(yi​−ai​),uS​=HS−1​bS​,gS​(w)=HS​w−bS​.

Here uDu_DuD​ uses all full-data indices, and HP,GPH_P,G_PHP​,GP​ use all server indices. Only the server feature maps enter its removal surrogate; server targets and offsets are unused. All norms are Euclidean vector or induced operator norms, as appropriate. The inverse is the total ring inverse; theorems must derive its validity from μ>0\mu>0μ>0, not assume it. Empty empirical averages are defined by Lean's total arithmetic, but the relevant theorems require S≠∅S\ne\varnothingS=∅ and, when server data appear, q>0q>0q>0. Zero parameter or output dimension is allowed.

Set

Fw(v)=12⟨v,HPv⟩−⟨gS(w),v⟩,vP(w)=HP−1gS(w),gap⁡(w,v)=Fw(v)−Fw(vP(w)),κ=∥HP−1∥∥GP−GS∥.F_w(v)=\tfrac12\langle v,H_Pv\rangle-\langle g_S(w),v\rangle, \quad v_P(w)=H_P^{-1}g_S(w),\quad \operatorname{gap}(w,v)=F_w(v)-F_w(v_P(w)), \quad\kappa=\|H_P^{-1}\|\|G_P-G_S\|.Fw​(v)=21​⟨v,HP​v⟩−⟨gS​(w),v⟩,vP​(w)=HP−1​gS​(w),gap(w,v)=Fw​(v)−Fw​(vP​(w)),κ=∥HP−1​∥∥GP​−GS​∥.

The probability model used only by the final target is a finite joint law on Ω={0,…,N−1}\Omega=\{0,\ldots,N-1\}Ω={0,…,N−1}: masses pω≥0p_\omega\ge0pω​≥0 sum to one and E[f]=∑ω∈Ωpωf(ω)\mathbb E[f]=\sum_{\omega\in\Omega}p_\omega f(\omega)E[f]=∑ω∈Ω​pω​f(ω). It allows arbitrary dependence between outputs. No law exists for N=0N=0N=0. The other targets are deterministic and assume no probability model.

Formalization note: the fixed affine-feature model is source-derived from Jin et al., arXiv:2306.02216v3, Section III-A (Section 3), PDF p. 3, equation (3), and PDF p. 4, equations (4)--(5). Arbitrary real targets and nonempty retained subsets explicitly extend the one-hot/client-removal setting. The finite-law error targets are corrected formulations, not transcriptions or proofs of the printed Theorem 2.

Preamble
import Definitions.Def_FedRemoval_Model
Formal statement
namespace FedRemoval
theorem ExactNewtonRemoval :
∀ (n d k : ℕ) (D : Data n d k) (s : Finset (Fin n)) (μ : ℝ),
    s.Nonempty → 0 < μ →
    ∀ w, w - exactCorrection D s μ w = optimum D s μ := by sorry
end FedRemoval
Source
Ruinan Jin, Minghui Chen, Qiong Zhang, Xiaoxiao Li, Forgettable Federated Linear Learning with Certified Data Unlearning, IEEE TNNLS (2026), arXiv:2306.02216v3, https://arxiv.org/pdf/2306.02216v3; Section II-B (Section 2), PDF p. 3, equation (1).
Read-back

What the Lean code literally says, in plain math · inherited model (exact model identifier unavailable)

For all natural numbers n,d,kn,d,kn,d,k, put Ft={0,…,t−1}F_t=\{0,\ldots,t-1\}Ft​={0,…,t−1} and Et=RFtE_t=\mathbb R^{F_t}Et​=RFt​ with Euclidean structure, and choose arbitrary continuous real-linear maps Ai:Ed→EkA_i:E_d\to E_kAi​:Ed​→Ek​, offsets ai∈Eka_i\in E_kai​∈Ek​, and targets yi∈Eky_i\in E_kyi​∈Ek​ for i∈Fni\in F_ni∈Fn​. For every finite subset s⊆Fns\subseteq F_ns⊆Fn​ and real μ\muμ satisfying s≠∅s\ne\varnothings=∅ and μ>0\mu>0μ>0, define G=∣s∣−1∑i∈sAi∗AiG=|s|^{-1}\sum_{i\in s}A_i^*A_iG=∣s∣−1∑i∈s​Ai∗​Ai​, b=∣s∣−1∑i∈sAi∗(yi−ai)b=|s|^{-1}\sum_{i\in s}A_i^*(y_i-a_i)b=∣s∣−1∑i∈s​Ai∗​(yi​−ai​), and H=G+μIEdH=G+\mu I_{E_d}H=G+μIEd​​, where stars denote Euclidean adjoints. Let RRR be the multiplicative inverse of HHH when invertible and the zero endomorphism otherwise, and set o=Rbo=Rbo=Rb. Then every w∈Edw\in E_dw∈Ed​ satisfies w−R(Hw−b)=ow-R(Hw-b)=ow−R(Hw−b)=o. The correction in this equality is precisely the defined vector R(Hw−b)R(Hw-b)R(Hw−b), and the named optimum is precisely RbRbRb; this assertion does not separately state a gradient or minimization property. There is no hypothesis that www solves any optimization problem, and sss is any nonempty subset without a required ownership map or deleted client. Nonempty sss forces n≥1n\ge1n≥1, but d=0d=0d=0, k=0k=0k=0, and zero or rank-deficient features are allowed. For d=0d=0d=0 the equation concerns the unique zero vector; for k=0k=0k=0, G=b=0G=b=0G=b=0 and H=μIEdH=\mu I_{E_d}H=μIEd​​, so the conclusion sends every www to o=0o=0o=0.

Human review
  • Endorsed by Shuze Chen · Sep 29, 2026

    Confirmed by the moderator at approval.

  • Endorsed by Minghui · Sep 29, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me